$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/-f1YoJ2HkfWXi2GiNJzDyxbf6Tk.roa File: -f1YoJ2HkfWXi2GiNJzDyxbf6Tk.roa (raw, json) Hash identifier: x+zidaOxAyTVRYqAtAPbXWqnSN389uMlGNfvzlUbe9k= Subject key identifier: F9:FD:58:A0:9D:87:91:F5:97:8B:61:A2:34:9C:C3:CB:16:DF:E9:39 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0F77 Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/-f1YoJ2HkfWXi2GiNJzDyxbf6Tk.roa Signing time: Fri 22 Aug 2025 08:51:24 +0000 ROA not before: Fri 22 Aug 2025 08:51:24 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18429 IP address blocks: 61.57.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3959 (0xf77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 22 08:51:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F9FD58A09D8791F5978B61A2349CC3CB16DFE939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fc:ca:d1:45:36:5d:d2:0e:51:3e:fd:34:13: 29:32:3d:8d:f5:bc:a0:9b:02:e6:ec:1e:01:ed:75: cc:9b:21:e5:ed:18:87:4d:e7:74:b2:82:5a:54:cc: ae:b6:fe:dc:cf:6a:85:72:1d:0d:bb:f9:c1:47:4a: 8a:7d:7e:f9:ef:39:56:4e:08:86:95:f4:a0:12:74: 75:5a:c3:c5:6a:a9:b3:0c:3e:3f:18:b5:d8:bc:b0: 18:12:d9:3f:68:85:7f:1e:24:fe:43:72:d3:06:55: 8f:cf:50:b0:30:c6:2b:cc:01:67:9a:a5:ea:07:d2: cf:3e:4b:c9:29:2e:df:53:23:4b:cd:5a:7f:63:c5: 6f:1b:b5:a6:aa:8e:44:56:78:c8:ff:7a:be:5b:6c: 65:e8:fa:eb:02:00:d4:a6:87:51:6e:b6:1d:89:a4: ec:cc:f3:3c:a3:fb:b1:81:53:1b:04:d1:76:68:9e: 29:e9:8c:6b:dd:3c:02:5e:8c:93:c2:1d:a9:d1:1c: 2d:ba:f6:62:d7:4f:20:5c:82:b1:82:7a:d4:85:f1: 15:27:e2:35:66:f7:85:bd:bf:04:91:d4:0a:e7:3f: 8e:ea:a4:be:18:bc:b1:67:f0:5d:db:d3:1e:bf:64: 15:9d:79:26:ec:cd:f6:a3:b1:6a:31:ec:85:86:ee: 12:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FD:58:A0:9D:87:91:F5:97:8B:61:A2:34:9C:C3:CB:16:DF:E9:39 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/-f1YoJ2HkfWXi2GiNJzDyxbf6Tk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.57.152.0/21 Signature Algorithm: sha256WithRSAEncryption 05:b8:8c:b2:12:07:9a:09:3b:1d:0c:51:13:8c:25:45:3c:7b: cb:28:d5:30:08:f1:10:75:44:05:a1:96:b9:0d:2d:05:69:a2: de:12:f9:40:c8:2c:0c:14:a1:f1:69:de:15:26:28:1a:7a:57: 2f:26:d2:ce:cc:d7:da:9f:33:d0:50:4c:b0:f5:8a:5e:bc:50: 8f:43:12:99:2e:ca:90:38:6e:34:fc:0f:00:cb:25:a6:2a:89: c1:ca:fc:47:f9:46:58:a2:b7:ac:df:08:fc:64:6e:3b:80:e8: 4c:66:8f:9f:bc:4f:75:db:67:73:9b:99:d3:43:e5:21:70:93: 94:36:62:ff:c6:8a:58:17:e4:8a:84:fd:91:2d:24:8e:e4:55: 17:43:28:57:79:4c:a6:90:0d:83:db:5b:77:2a:1b:1f:f0:9d: 0f:02:a7:2f:be:21:dc:f5:7e:69:24:af:58:25:b0:c5:51:37: 63:b6:49:5b:9f:5a:1d:05:bf:4a:0e:c9:5d:a8:69:d9:66:44: 02:2d:ac:ad:6e:70:c2:f3:8d:83:63:80:7c:96:dd:a9:27:bf: d8:79:bc:66:2f:b5:bd:c1:6b:0f:78:c8:f6:45:67:2c:5d:9c: 76:d1:6d:3a:c7:7f:19:c6:d6:ae:5f:61:71:19:9f:11:7a:7b: 51:8f:b5:f2 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD3cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTA4MjIw ODUxMjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY5RkQ1OEEwOUQ4Nzkx RjU5NzhCNjFBMjM0OUNDM0NCMTZERkU5MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDb/MrRRTZd0g5RPv00EykyPY31vKCbAubsHgHtdcybIeXtGIdN 53SyglpUzK62/tzPaoVyHQ27+cFHSop9fvnvOVZOCIaV9KASdHVaw8VqqbMMPj8Y tdi8sBgS2T9ohX8eJP5DctMGVY/PULAwxivMAWeapeoH0s8+S8kpLt9TI0vNWn9j xW8btaaqjkRWeMj/er5bbGXo+usCANSmh1Futh2JpOzM8zyj+7GBUxsE0XZoninp jGvdPAJejJPCHanRHC269mLXTyBcgrGCetSF8RUn4jVm94W9vwSR1ArnP47qpL4Y vLFn8F3b0x6/ZBWdeSbszfajsWox7IWG7hKTAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU+f1YoJ2HkfWXi2GiNJzDyxbf6TkwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC8tZjFZb0oySGtmV1hpMkdpTkp6 RHl4YmY2VGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDPTmY MA0GCSqGSIb3DQEBCwUAA4IBAQAFuIyyEgeaCTsdDFETjCVFPHvLKNUwCPEQdUQF oZa5DS0FaaLeEvlAyCwMFKHxad4VJigaelcvJtLOzNfanzPQUEyw9YpevFCPQxKZ LsqQOG40/A8AyyWmKonByvxH+UZYores3wj8ZG47gOhMZo+fvE9122dzm5nTQ+Uh cJOUNmL/xopYF+SKhP2RLSSO5FUXQyhXeUymkA2D21t3Khsf8J0PAqcvviHc9X5p JK9YJbDFUTdjtklbn1odBb9KDsldqGnZZkQCLaytbnDC842DY4B8lt2pJ7/Yebxm L7W9wWsPeMj2RWcsXZx20W06x38ZxtauX2FxGZ8RentRj7Xy -----END CERTIFICATE-----Generated at Sun Aug 24 16:05:10 2025 by rpki-client